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DETAILED ACTION 


1. 


This action is responding to application papers filed 12-2-2003. 


2. 


Claims 1 - 2 are pending. Claims 1 are independent. 


Claim Rejections - 35 USC § 102 


3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102(e) 
that form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 


another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed In the United States before the invention by 
the applicant for patent, except that an international application filed under the treaty defined in 
section 351 (a) shall have the effects for purposes of this subsection of an application filed in the 
United States only if the international application designated the United States and was published 
under Article 21 (2) of such treaty in the English language. 


4. Claim 1 is rejected under 35 U.S.C. 102(e) as being anticipated by Zhao et al. 
(US Patent No. 7,124,295). 

Regarding Claim 1, Zhao discloses a method for updating CRL information between 
distributed components in a PKI environment, comprising: 

a) sequentially receiving a plurality of periodically updated versions of a CRL 
associated with a certificate authority; (see Zhao Figure 4; col. 3, lines 5-10: an 
update information only CRL (i.e. DeltaCRL) received by requestor) 

b) generating a plurality of DeltaCRL data elements by reference to sequentially 
adjacent CRL versions from the received CRL versions; (see Zhao Figure 4; col. 
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5, lines 1-3; col. 5, lines 8-12: multiple update information only CRLs (i.e. 
DeltaCRLs), appended together, multiple updates in one transmission) 

c) providing the DeltaCRLs to a node in a distributed PKI environment; (see Zhao 
col, 1, lines 14-17: PKI environment; col. 5, lines 24-30: combined set of multiple 
update information only CRLs (i.e. DeltaCRLs) returned to requestor; col. 4, line 
66 - col. 5, line 4: reduction in time to transmit (i.e. bandv^^idth reduction)) and 

d) the node sequentially applying the DeltaCRLs to a base CRL to provide 
increasingly updated versions of said CRL, the base CRL being a version of the 
CRL within the timeframe of said periodically updated sequence of CRLs. (see 
Zhao col. 5, lines 31-32: multiple update information only CRL lists processed, 
server certificate revocation information updated to latest state) 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

6. Claim 2 is rejected under 35 U.S.C. 103(a) as being unpatentable over Zhao in 
view of Toneguzzo (US PGPUB No. 20030182573). 
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Regarding Claim 2, Zhao discloses the method of claim 1 with an attached digital 
signature, (see Zhao coL 5, lines 39-40: digital signature attached to reply update 
information only CRL (i.e. DeltaCRL) transmission) Zhao does not specifically disclose 
generating a hash value corresponding to each DeltaCRL, the hash value generated by 
reference sequentially adjacent CRL versions from the received CRL versions. And, 
Toneguzzo disclose wherein generating a hash value corresponding to each DeltaCRL, 
the hash value generated by reference sequentially adjacent CRL versions from the 
received CRL versions, (see Toneguzzo paragraph [0021], lines 1-9: Certificate 
Authority (CA), CRL processing capability; paragraph [0027], lines 1-4; paragraph 
[0029], lines 1-3; paragraph [0030], lines 5-8: hash generation and verification 
procedures for transmitted message (i.e. each message, a DeltaCRL)) 

It would have been obvious to one of ordinary skill in the art to modify Zhao as 
taught by Toneguzzo to enable the capability for the utilization of hash values for secure 
digital data representations during network communications. One of ordinary skill in the 
art would have been motivated to employ the teachings of Toneguzzo in order to 
guarantee to recipient that signed file came from individual who sent it, and that signed 
file was not altered since signature attached, (see Toneguzzo paragraph [0026], lines 
5-8: " .,.An effective digital signature is more secure than a paper signature. A digital 
signature provides a guarantee to a recipient that the signed file came from the person 
who sent it, and that it was not altered since it was signed. 
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Conclusion 


Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carlton Johnson whose telephone number is 571-270- 
1032. The examiner can normally be reached Monday through Friday from 8:00AM to 
5:00PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nassar Moazzami, can be reached on 571-272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 



NASSER MOAZZAMI 
SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 


Carlton Johnson 
December 22, 2006 



